Langchain Mcp Tools TsCAUTION
MCP to LangChain Tools Conversion Utility / TypeScript
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
MCP to LangChain Tools Conversion Library / TypeScript [](https://github.com/hideya/langchain-mcp-tools-ts/blob/main/LICENSE) [](https://www.npmjs.com/package/@h1deya/langchain-mcp-tools) [](https://dependents.info/hideya/langchain-mcp-tools-ts)
A simple, lightweight library to use Model Context Protocol (MCP) server tools from LangChain.
Project Status
This library currently supports MCP Protocol version 2025-03-26. It does not support the MCP 2026-07-28 specification.
For new projects, we recommend using LangChain's official LangChain.js MCP Adapters library, which provides comprehensive MCP integration for LangChain.
This project is now in maintenance / dormant mode. Existing users may continue using it with MCP servers compatible with the 2025-03-26 specification, but new MCP protocol features will not be actively implemented here.
Introduction
A simple, lightweight library to use Model Context Protocol (MCP) server tools from LangChain.
Its simplicity and extra features, such as tools schema adjustments for LLM compatibility and tools invocation logging, make it a useful basis for your experiments and customizations. However, it only supports text results of tool calls and does not support MCP features other
143452331985OBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add langchain-mcp-tools --env AIRTABLE_API_KEY=${AIRTABLE_API_KEY} --env BRAVE_API_KEY=${BRAVE_API_KEY} --env GITHUB_PERSONAL_ACCESS_TOKEN=${GITHUB_PERSONAL_ACCESS_TOKEN} -- npx -y @h1deya/[email protected]{
"mcpServers": {
"langchain-mcp-tools": {
"command": "npx",
"args": [
"-y",
"@h1deya/[email protected]"
],
"env": {
"AIRTABLE_API_KEY": "${AIRTABLE_API_KEY}",
"BRAVE_API_KEY": "${BRAVE_API_KEY}",
"GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_PERSONAL_ACCESS_TOKEN}"
}
}
}
}Exposed tools (8)
8 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
echo | read | |
error-tool | read | Error Tool |
mixed-content | read | Test Tool |
random-number | read | |
server-info | read | |
test-tool | read | A test tool |
tool1 | read | Tool 1 |
tool2 | read | Tool 2 |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
const SERVER_URL = "http://127.0.0.1:3333";
console.log(`For local testing, use: http://127.0.0.1:${PORT}`);const SERVER_URL = "http://127.0.0.1:3334";
console.log(`For local testing, use: http://127.0.0.1:${PORT}`);console.log(`MCP endpoint: http://127.0.0.1:${PORT}/mcp`);.env.template
@h1deya/json-schema-to-zod, @langchain/core, @modelcontextprotocol/sdk, zod, @eslint/js, @langchain/anthropic, @langchain/cerebras, @langchain/google-genai
Gates applied: no_behavioural_pass.
143452331985full audit observations/trust-audit/mcp-server/hideya__langchain-mcp-tools-ts.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 143452331985 | CAUTION | B | 89 | first audit |
Questions
What is the Langchain Mcp Tools Ts MCP server?
MCP to LangChain Tools Conversion Utility / TypeScript
What tools does Langchain Mcp Tools Ts expose?
8 in total: 8 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Langchain Mcp Tools Ts safe to connect to an agent?
With care. The audit graded it B (89/100) and found 7 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Langchain Mcp Tools Ts need?
It reads AIRTABLE_API_KEY, BRAVE_API_KEY and GITHUB_PERSONAL_ACCESS_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Langchain Mcp Tools Ts run?
It speaks sse and streamable-http, so it runs as a service you connect to over the network. It is published on npm as @h1deya/langchain-mcp-tools at 0.4.3.
How current is this page?
The grade is for one exact copy of the source (143452331985), read on 2026-10-09. The repository is watched and re-audited when it changes.